The VERBIS Registration Exemption Criterion has Changed
On 25th July 2023, the Decision of the Personal Data Protection Board has been published in the Official Gazette. The decision aims to make changes to the exception criteria regarding the obligation to register with the Data Controllers Registry.
By updating the 2018/87 decision dated 19th July 2018, the following amendment has been made: 'Individual or legal entity data controllers with fewer than 50 employees and an annual financial statement total of less than 100 million Turkish liras, and whose main activity does not involve the processing of sensitive personal data,' will now be exempt from the obligation to register with the Data Controllers Registry. This means that individual or legal entity data controllers meeting these criteria will be exempt from the obligation to register with the Data Controllers Registry if their main activity does not involve the processing of sensitive personal data.